OpenClaw: Browser tabs action select and close routes bypassed SSRF policy

Mô tả

Tham khảo

• openclaw/openclaw security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2026-42439 · ADVISORY
• openclaw/openclaw#63332 · WEB
• openclaw/openclaw commit 48c0347 · WEB
• openclaw/openclaw commit 48c0347 · WEB
• openclaw/openclaw · PACKAGE
• vulncheck.com/advisories/openclaw-ssrf-policy-bypass-in-browser-tabs-action-routes · WEB

Lỗ hổng khác của openclaw

• CVE-2026-62229CAO 8.8OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lower-trust callers to e…
• CVE-2026-62228CAO 8.8OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute act…
• CVE-2026-62227CAO 7.7OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to validate pos…
• CVE-2026-62226CAO 8.5OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate c…
• CVE-2026-62225TRUNG BÌNH 5.4OpenClaw versions before 2026.5.18 contain an authorization bypass vulnerability in skill command dispatch that allows lower-trust callers t…